Exhibit B _Form DTMB-0928.docx

Only use arrow down/up keys to navigate Contractor Security Agreement Michigan Department of Technology, Management and Budget DTMB-0928 Revised 7/19/2019 Section 1. Contractor Information 1.

2. Contractor Name

Section 2. Security Agreement As a user of services provided by the Department of Technology, Management & Budget, I accept and agree to:

1. Comply with the State of Michigan Computer Crime Law and to use State of Michigan's systems to perform my job function to the exclusion of all other uses. (Public Act 53 of 1979)1

2. Not copy or infringe upon the rights granted to the owner of a product with a Copyright or Patent.

3. Comply with the Michigan Civil Service Commission Rules governing Conflict of Interest. (Rule 2-8)2

4. Keep confidential all computers and network system access codes issued to me.

5. Report to the appropriate supervisor or the Office of Cybersecurity and Infrastructure Protection (CIP) immediately any suspected threat to or violation of State of Michigan system security.

6. Report to the appropriate supervisor or the Office of Infrastructure Protection (OIP), the loss or theft of any key or facility access card which was supplied to me, which allows access to any State of Michigan facility.

7. Not loan or transfer to anyone else the facility access card, which was supplied to me, for access to any State of Michigan facility.

8. Comply with State of Michigan Information Technology Information Security Policy 1340.00 and the Acceptable Use of Information Technology Standard 1340.00.130.02.3

9. Comply with federal laws regarding confidentiality to protect an individual’s rights and privacy.

10. Not leave my workstation unattended without either being logged off or invoking a hotkey password supported screen saver.

11. Comply with HIPAA Confidentiality requirements. To ensure that privacy rights of enrollees are respected, you are required to only use any protected health information you access for the purpose of ensuring proper plan operation and administration. You also are prohibited from disclosing any protected health information to any outside party without written authorization of the Privacy Official of the Employee Benefits Division of the Michigan Department of Civil Service or the Privacy Official's designee.

Section 3. Agreement Signature

AUTHORITY: 1 Public Act 53 of 1979 (http://legislature.mi.gov/doc.aspx?mcl-act-53-of-1979) References 2 Michigan Civil Service Commission Rules (http://www.michigan.gov/documents/mdcs/Michigan_Civil_Service_ Commission_Rules_347183_7.pdf), 2-8 Ethical Standards and Conduct 3 IT Policies, Standards and Procedures (https://stateofmichigan.sharepoint.com/teams/insidemi/Pages/ For%20Your%20Job/In%20the%20Office/IT_PSP.aspx), 1340.00 Information Technology Security Policy and 1340.00.130.02 Acceptable Use of Information Technology Standard.

image1.png